Trojaner-Board - ebenfalls unerwünschte Weiterleitung beim Anklicken von Suchmaschinenergebnissen

DEFOGGER:

Code:

defogger_disable by jpshortstuff (23.02.10.1)

Log created at 15:59 on 18/02/2012 (Familie)
 

Checking for autostart values...

HKCU\~\Run values retrieved.

HKLM\~\Run values retrieved.
 

Checking for services/drivers...

SPTD -> Already disabled
 
 

-=E.O.F=-

DDS.txt:

Code:

.

DDS (Ver_2011-08-26.01) - NTFSAMD64 

Internet Explorer: 8.0.7601.17514  BrowserJavaVersion: 1.6.0_29

Run by Familie at 16:01:19 on 2012-02-18

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.4094.2995 [GMT 1:00]

.

AV: Avira Desktop *Enabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

SP: Avira Desktop *Enabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

============== Running Processes ===============

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

C:\Windows\system32\conhost.exe

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\system32\atiesrxx.exe

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe

C:\Windows\system32\atieclxx.exe

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\spoolsv.exe

C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe

C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe

C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE

C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\system32\svchost.exe -k imgsvc

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\system32\taskeng.exe

C:\Windows\Explorer.EXE

C:\Windows\System32\spool\drivers\x64\3\E_IATIHLE.EXE

C:\Windows\System32\spool\drivers\x64\3\E_IATIHLE.EXE

C:\Windows\System32\rundll32.exe

C:\Windows\SysWOW64\rundll32.exe

C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe

C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe

C:\Program Files (x86)\iTunesHelper.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\reader_sl.exe

C:\Program Files\iPod\bin\iPodService.exe

C:\Windows\system32\SearchProtocolHost.exe

C:\Windows\system32\SearchFilterHost.exe

C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe

C:\Program Files (x86)\Nero\Update\NASvc.exe

C:\Windows\system32\sppsvc.exe

C:\Windows\System32\svchost.exe -k secsvcs

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\DllHost.exe

C:\Windows\system32\DllHost.exe

C:\Windows\SysWOW64\cmd.exe

C:\Windows\system32\conhost.exe

C:\Windows\SysWOW64\cscript.exe

C:\Windows\system32\wbem\wmiprvse.exe

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://www.google.com/

uInternet Settings,ProxyOverride = *.local

mWinlogon: Userinit=userinit.exe,

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

BHO: DivX Plus Web Player HTML5 <video>: {326e768d-4182-46fd-9c16-1449a49795f4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll

BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\Program Files (x86)\Office 2007\Office12\GrooveShellExtensions.dll

BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

BHO: Skype add-on for Internet Explorer: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll

TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File

uRun: [EPSON SX235 Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHLE.EXE /FU "C:\Users\Familie\AppData\Local\Temp\E_S5FA0.tmp" /EF "HKCU"

uRun: [Epson Stylus SX235(Netzwerk)] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHLE.EXE /FU "C:\Users\Familie\AppData\Local\Temp\E_S5F43.tmp" /EF "HKCU"

uRun: [ULATHM] rundll32 "C:\Users\Familie\AppData\Roaming\cleanmgrk.dll",YYDIJHIMHFV

mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

mRun: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min

mRun: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"

mRun: [iTunesHelper] "C:\Program Files (x86)\iTunesHelper.exe"

mRun: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\MCAFEE~1.LNK - C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe

mPolicies-explorer: NoActiveDesktop = 1 (0x1)

mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1)

mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)

mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)

mPolicies-system: EnableUIADesktopToggle = 0 (0x0)

IE: Add to Google Photos Screensa&ver - C:\Windows\system32\GPhotos.scr/200

IE: Nach Microsoft E&xel exportieren - C:\PROGRA~2\OFFICE~1\Office12\EXCEL.EXE/3000

IE: {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe

IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\PROGRA~2\OFFICE~1\Office12\ONBttnIE.dll

IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\OFFICE~1\Office12\REFIEBAR.DLL

DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab

DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab

DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab

TCP: DhcpNameServer = 192.168.1.1

TCP: Interfaces\{8EA26E67-68B4-4F07-BDDE-BD5CF5CFA474} : DhcpNameServer = 192.168.1.1

Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Office 2007\Office12\GrooveSystemServices.dll

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL

SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\Program Files (x86)\Office 2007\Office12\GrooveShellExtensions.dll

{18DF081C-E8AD-4283-A596-FA578C2EBDC3}

{326E768D-4182-46FD-9C16-1449A49795F4}

{72853161-30C5-4D22-B7F9-0BBC1D38A37E}

{9030D464-4C02-4ABF-8ECC-5164760863C6}

{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}

{DBC80044-A445-435b-BC74-9C25C1C588A9}

TB-X64: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File

mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

mRun-x64: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min

mRun-x64: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"

mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunesHelper.exe"

mRun-x64: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

IE-X64: {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe

SEH-X64: {B5A7F190-DDA6-4420-B3BA-52453494E6CD}: Groove GFS Stub Execution Hook

.

================= FIREFOX ===================

.

FF - ProfilePath - C:\Users\Familie\AppData\Roaming\Mozilla\Firefox\Profiles\2i2x9yr4.default\

FF - prefs.js: browser.search.selectedEngine - Ecosia

FF - prefs.js: browser.startup.homepage - www.google.de

FF - component: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\components\FirefoxExtension.dll

FF - component: C:\Program Files (x86)Nokia\Nokia PC Suite 7\bkmrksync\components\BkMrkExt.dll

FF - plugin: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll

FF - plugin: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll

FF - plugin: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll

FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

FF - plugin: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll

FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll

FF - plugin: C:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrlui.dll

FF - plugin: C:\Program Files (x86)\Mozilla Plugins\npitunes.dll

FF - plugin: C:\Program Files (x86)\Plugins\npqtplugin.dll

FF - plugin: C:\Program Files (x86)\Plugins\npqtplugin2.dll

FF - plugin: C:\Program Files (x86)\Plugins\npqtplugin3.dll

FF - plugin: C:\Program Files (x86)\Plugins\npqtplugin4.dll

FF - plugin: C:\Program Files (x86)\Plugins\npqtplugin5.dll

FF - plugin: C:\Program Files (x86)\Plugins\npqtplugin6.dll

FF - plugin: C:\Program Files (x86)\Plugins\npqtplugin7.dll

FF - plugin: C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll

FF - plugin: C:\Program Files\Veetle\Player\npvlc.dll

FF - plugin: C:\Program Files\Veetle\plugins\npVeetle.dll

FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll

.

============= SERVICES / DRIVERS ===============

.

R1 avkmgr;avkmgr;C:\Windows\system32\DRIVERS\avkmgr.sys --> C:\Windows\system32\DRIVERS\avkmgr.sys [?]

R2 ABBYY.Licensing.FineReader.Sprint.9.0;ABBYY FineReader 9.0 Sprint Licensing Service;C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [2009-5-14 759048]

R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\system32\atiesrxx.exe --> C:\Windows\system32\atiesrxx.exe [?]

R2 AntiVirSchedulerService;Avira Planer;C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2011-10-28 86224]

R2 AntiVirService;Avira Echtzeit Scanner;C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2011-10-28 110032]

R2 avgntflt;avgntflt;C:\Windows\system32\DRIVERS\avgntflt.sys --> C:\Windows\system32\DRIVERS\avgntflt.sys [?]

R2 EPSON_EB_RPCV4_04;EPSON V5 Service4(04);C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE [2012-2-5 168448]

R2 EPSON_PM_RPCV4_04;EPSON V3 Service4(04);C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE [2012-2-5 131072]

R2 MBAMService;MBAMService;C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-2-17 652360]

R2 NAUpdate;Nero Update;C:\Program Files (x86)\Nero\Update\NASvc.exe [2010-5-4 503080]

R2 vpnagent;Cisco AnyConnect Secure Mobility Agent;C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe [2011-12-15 476112]

R3 amdkmdag;amdkmdag;C:\Windows\system32\DRIVERS\atikmdag.sys --> C:\Windows\system32\DRIVERS\atikmdag.sys [?]

R3 amdkmdap;amdkmdap;C:\Windows\system32\DRIVERS\atikmpag.sys --> C:\Windows\system32\DRIVERS\atikmpag.sys [?]

R3 MBAMProtector;MBAMProtector;\??\C:\Windows\system32\drivers\mbam.sys --> C:\Windows\system32\drivers\mbam.sys [?]

R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576]

S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-6 136176]

S3 acsock;acsock;C:\Windows\system32\DRIVERS\acsock64.sys --> C:\Windows\system32\DRIVERS\acsock64.sys [?]

S3 gupdatem;Google Update-Dienst (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-6 136176]

S3 LVUVC64;Logitech QuickCam S5500(UVC);C:\Windows\system32\DRIVERS\lvuvc64.sys --> C:\Windows\system32\DRIVERS\lvuvc64.sys [?]

S3 McComponentHostService;McAfee Security Scan Component Host Service;C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe [2010-1-15 227232]

S3 TsUsbFlt;TsUsbFlt;C:\Windows\system32\drivers\tsusbflt.sys --> C:\Windows\system32\drivers\tsusbflt.sys [?]

.

=============== Created Last 30 ================

.

2012-02-17 21:15:43        8602168        ----a-w-        C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{447084A3-5755-447B-B737-4A3D7C75C51B}\mpengine.dll

2012-02-17 14:36:51        --------        d-----w-        C:\Users\Familie\.gimp-2.6

2012-02-17 14:35:16        --------        d-----w-        C:\Program Files (x86)\GIMP-2.0

2012-02-17 13:56:28        --------        d-----w-        C:\Users\Familie\AppData\Local\Microsoft Help

2012-02-17 11:25:32        --------        d-----w-        C:\Users\Familie\AppData\Roaming\Malwarebytes

2012-02-17 11:25:25        23152        ----a-w-        C:\Windows\System32\drivers\mbam.sys

2012-02-17 11:25:25        --------        d-----w-        C:\ProgramData\Malwarebytes

2012-02-17 11:25:25        --------        d-----w-        C:\Program Files (x86)\Malwarebytes' Anti-Malware

2012-02-17 00:23:13        --------        d-----w-        C:\ProgramData\Rockstar Games

2012-02-17 00:21:48        --------        d-----w-        C:\Program Files (x86)\Rockstar Games

2012-02-16 11:00:21        199680        --sha-r-        C:\Users\Familie\AppData\Roaming\cleanmgrk.dll

2012-02-14 20:14:07        --------        d-----w-        C:\Program Files (x86)\NVIDIA Corporation

2012-02-14 20:13:40        --------        d-----w-        C:\Program Files (x86)\Common Files\Wise Installation Wizard

2012-02-14 16:05:23        97240        ----a-w-        C:\Program Files\Mozilla Firefox\libEGL.dll

2012-02-14 16:05:23        801752        ----a-w-        C:\Program Files\Mozilla Firefox\mozsqlite3.dll

2012-02-14 16:05:23        626688        ----a-w-        C:\Program Files\Mozilla Firefox\msvcr80.dll

2012-02-14 16:05:23        548864        ----a-w-        C:\Program Files\Mozilla Firefox\msvcp80.dll

2012-02-14 16:05:23        479232        ----a-w-        C:\Program Files\Mozilla Firefox\msvcm80.dll

2012-02-14 16:05:23        45016        ----a-w-        C:\Program Files\Mozilla Firefox\mozutils.dll

2012-02-14 16:05:23        437208        ----a-w-        C:\Program Files\Mozilla Firefox\libGLESv2.dll

2012-02-14 16:05:23        2106216        ----a-w-        C:\Program Files\Mozilla Firefox\D3DCompiler_43.dll

2012-02-14 16:05:23        1998168        ----a-w-        C:\Program Files\Mozilla Firefox\d3dx9_43.dll

2012-02-14 16:05:23        1911768        ----a-w-        C:\Program Files\Mozilla Firefox\mozjs.dll

2012-02-14 16:05:23        15832        ----a-w-        C:\Program Files\Mozilla Firefox\mozalloc.dll

2012-02-14 16:05:23        134104        ----a-w-        C:\Program Files\Mozilla Firefox\components\browsercomps.dll

2012-02-14 16:03:45        --------        d-----w-        C:\Program Files (x86)\Mozilla Plugins

2012-02-14 16:03:43        --------        d-----w-        C:\Program Files (x86)\iTunesHelper.Resources

2012-02-14 16:03:22        --------        d-----w-        C:\Program Files\iPod

2012-02-14 16:03:22        --------        d-----w-        C:\Program Files (x86)\iTunes.Resources

2012-02-14 16:03:21        --------        d-----w-        C:\Program Files\iTunes

2012-02-14 16:03:21        --------        d-----w-        C:\Program Files (x86)\CD Configuration

2012-02-14 16:01:47        --------        d-----w-        C:\Program Files\Bonjour

2012-02-14 16:01:47        --------        d-----w-        C:\Program Files (x86)\Bonjour

2012-02-05 13:39:06        77824        ----a-w-        C:\Windows\SysWow64\EBAPI.dll

2012-02-05 13:39:06        65536        ----a-w-        C:\Windows\SysWow64\EEBUtil.dll

2012-02-05 13:39:06        55808        ----a-w-        C:\Windows\SysWow64\EEBSDKIF.dll

2012-02-05 13:39:06        135168        ----a-w-        C:\Windows\SysWow64\EEBAPI.dll

2012-02-05 13:39:06        110592        ----a-w-        C:\Windows\SysWow64\EEBDSCVR.dll

2012-02-05 11:46:40        --------        d-----w-        C:\Users\Familie\Scans

2012-02-05 10:11:02        --------        d-----w-        C:\Program Files\Common Files\EPSON

2012-02-05 10:06:44        --------        d-----w-        C:\Users\Familie\AppData\Local\ABBYY

2012-02-05 10:05:42        --------        d-----w-        C:\ProgramData\ABBYY

2012-02-05 10:05:42        --------        d-----w-        C:\Program Files (x86)\Common Files\ABBYY

2012-02-05 10:05:42        --------        d-----w-        C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint

2012-02-05 10:04:18        --------        d-----w-        C:\ProgramData\UDL

2012-02-05 10:03:18        --------        d-----w-        C:\Program Files\Epson Software

2012-02-05 10:01:11        --------        d-----w-        C:\Program Files (x86)\Epson Software

2012-02-05 10:00:20        558592        ----a-w-        C:\Windows\System32\ensppmon.dll

2012-02-05 10:00:20        558592        ----a-w-        C:\Windows\System32\enppmon.dll

2012-02-05 10:00:20        538112        ----a-w-        C:\Windows\System32\ensppui.dll

2012-02-05 10:00:20        538112        ----a-w-        C:\Windows\System32\enppui.dll

2012-02-05 10:00:20        250880        ----a-w-        C:\Windows\System32\enspres.dll

2012-02-05 10:00:20        250880        ----a-w-        C:\Windows\System32\enpres.dll

2012-02-05 10:00:19        --------        d-----w-        C:\Program Files\EpsonNet

2012-02-05 10:00:09        --------        d-----w-        C:\Program Files (x86)\Common Files\EPSON

2012-02-05 09:59:57        118784        ----a-w-        C:\Windows\System32\E_ILMHLE.DLL

2012-02-05 09:59:57        10752        ----a-w-        C:\Windows\System32\E_GCINST.DLL

2012-02-05 09:59:56        88064        ----a-w-        C:\Windows\System32\E_IBCBHLE.DLL

2012-02-05 09:59:52        --------        d-----w-        C:\ProgramData\EPSON

2012-02-05 09:59:44        464384        ----a-w-        C:\Windows\System32\esxw2ud.dll

2012-02-05 09:59:44        13824        ----a-w-        C:\Windows\System32\esxcdev.dll

2012-02-05 09:59:44        132560        ----a-w-        C:\Windows\System32\esdevapp.exe

2012-02-05 09:59:39        --------        d-----w-        C:\Program Files (x86)\epson

2012-02-03 10:19:18        --------        d-----w-        C:\ProgramData\firebird

2012-02-03 10:18:33        --------        d-----w-        C:\ProgramData\JanitosTarifrechner

2012-02-03 10:18:33        --------        d-----w-        C:\Program Files (x86)\Fairware24

2012-01-30 14:27:14        0        ---ha-w-        C:\Users\Familie\AppData\Local\BIT4BEE.tmp

2012-01-30 13:48:29        0        ---ha-w-        C:\Users\Familie\AppData\Local\BIT3F61.tmp

2012-01-30 13:18:14        0        ---ha-w-        C:\Users\Familie\AppData\Local\BITD892.tmp

2012-01-30 13:09:45        0        ---ha-w-        C:\Users\Familie\AppData\Local\BIT5409.tmp

2012-01-30 12:24:18        0        ---ha-w-        C:\Users\Familie\AppData\Local\BITDEAA.tmp

2012-01-30 10:58:48        0        ---ha-w-        C:\Users\Familie\AppData\Local\BIT8604.tmp

.

==================== Find3M  ====================

.

2012-01-26 23:52:58        279656        ------w-        C:\Windows\System32\MpSigStub.exe

2012-01-16 16:22:16        293736        ----a-w-        C:\Program Files (x86)\iTunesOutlookAddIn.dll

2012-01-16 16:22:12        421736        ----a-w-        C:\Program Files (x86)\iTunesHelper.exe

2012-01-16 16:22:12        403304        ----a-w-        C:\Program Files (x86)\iTunesAdmin.dll

2012-01-16 16:22:12        156520        ----a-w-        C:\Program Files (x86)\iTunesHelper.dll

2012-01-16 16:22:08        9777000        ----a-w-        C:\Program Files (x86)\iTunes.exe

2012-01-16 16:22:04        20868968        ----a-w-        C:\Program Files (x86)\iTunes.dll

2012-01-16 16:22:02        803200        ----a-w-        C:\Program Files (x86)\gnsdk_sdkmanager.dll

2012-01-16 16:22:02        3035520        ----a-w-        C:\Program Files (x86)\gnsdk_dsp.dll

2012-01-16 16:22:02        287104        ----a-w-        C:\Program Files (x86)\gnsdk_submit.dll

2012-01-16 16:22:02        246144        ----a-w-        C:\Program Files (x86)\gnsdk_musicid.dll

2012-01-14 04:06:27        3145728        ----a-w-        C:\Windows\System32\win32k.sys

2012-01-09 22:05:27        404640        ----a-w-        C:\Windows\SysWow64\FlashPlayerCPLApp.cpl

2012-01-04 10:44:20        509952        ----a-w-        C:\Windows\System32\ntshrui.dll

2012-01-04 08:58:41        442880        ----a-w-        C:\Windows\SysWow64\ntshrui.dll

2011-12-30 06:26:08        515584        ----a-w-        C:\Windows\System32\timedate.cpl

2011-12-30 05:27:56        478720        ----a-w-        C:\Windows\SysWow64\timedate.cpl

2011-12-28 03:59:24        498688        ----a-w-        C:\Windows\System32\drivers\afd.sys

2011-12-16 08:47:38        1188864        ----a-w-        C:\Windows\System32\wininet.dll

2011-12-16 08:46:06        634880        ----a-w-        C:\Windows\System32\msvcrt.dll

2011-12-16 07:54:22        981504        ----a-w-        C:\Windows\SysWow64\wininet.dll

2011-12-16 07:52:58        690688        ----a-w-        C:\Windows\SysWow64\msvcrt.dll

2011-12-16 06:44:38        1638912        ----a-w-        C:\Windows\System32\mshtml.tlb

2011-12-16 06:09:17        1638912        ----a-w-        C:\Windows\SysWow64\mshtml.tlb

2011-12-15 15:34:30        10704        ----a-w-        C:\Windows\SysWow64\vpncategories.dll

2011-12-15 15:34:25        33232        ----a-w-        C:\Windows\SysWow64\vpnevents.dll

2011-12-15 15:26:09        26536        ----a-w-        C:\Windows\System32\drivers\vpnva64.sys

2011-12-15 15:25:15        106408        ----a-r-        C:\Windows\System32\drivers\acsock64.sys

2011-11-14 19:16:44        112488        ----a-w-        C:\Program Files (x86)\ITDetector.ocx

2011-10-24 14:30:12        796520        ----a-w-        C:\Program Files (x86)\QTPlugin.ocx

2011-10-24 14:30:12        1234808        ----a-w-        C:\Program Files (x86)\QuickTimePlayer.exe

2011-10-24 14:02:28        8120168        ----a-w-        C:\Program Files (x86)\QuickTimePlayer.dll

2011-10-24 14:02:24        370536        ----a-w-        C:\Program Files (x86)\QTUIPanelControl.dll

2011-10-24 14:02:20        894824        ----a-w-        C:\Program Files (x86)\QTOControl.dll

2011-10-24 14:02:20        821096        ----a-w-        C:\Program Files (x86)\QTOLibrary.dll

2011-10-24 13:28:52        421888        ----a-w-        C:\Program Files (x86)\QTTask.exe

2011-10-24 13:28:38        561152        ----a-w-        C:\Program Files (x86)\PictureViewer.exe

2001-05-06 19:10:18        299520        ----a-w-        C:\Program Files\PictureViewer.exe

2001-05-06 19:10:18        225792        ----a-w-        C:\Program Files\QTInfo.exe

2001-05-06 19:10:18        127488        ----a-w-        C:\Program Files\QuickTimeUpdater.exe

2001-05-06 19:10:17        1056256        ----a-w-        C:\Program Files\QuickTimePlayer.exe

.

============= FINISH: 16:02:39,53 ===============

und Attach.txt:

Code:

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2011-08-26.01)

.

Microsoft Windows 7 Home Premium 

Boot Device: \Device\HarddiskVolume1

Install Date: 16.05.2010 20:38:50

System Uptime: 18.02.2012 15:58:10 (1 hours ago)

.

Motherboard: Gigabyte Technology Co., Ltd. |  | GA-MA770T-UD3

Processor: AMD Phenom(tm) II X4 945 Processor | Socket M2 | 780/200mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 103 GiB total, 22,472 GiB free.

D: is FIXED (NTFS) - 68 GiB total, 62,704 GiB free.

E: is FIXED (NTFS) - 127 GiB total, 44,306 GiB free.

F: is CDROM (CDFS)

G: is FIXED (NTFS) - 149 GiB total, 18,267 GiB free.

.

==== Disabled Device Manager Items =============

.

Class GUID: {4d36e972-e325-11ce-bfc1-08002be10318}

Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64

Device ID: ROOT\NET\0000

Manufacturer: Cisco Systems

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64

PNP Device ID: ROOT\NET\0000

Service: vpnva

.

==== System Restore Points ===================

.

RP268: 15.02.2012 11:33:51 - Installed Company of Heroes.

RP269: 16.02.2012 19:31:55 - Windows Update

RP270: 16.02.2012 21:10:41 - Installed Cisco AnyConnect Secure Mobility Client

RP271: 17.02.2012 01:23:07 - Installiert L.A. Noire

RP272: 17.02.2012 21:54:47 - Installed L.A. Noire

.

==== Installed Programs ======================

.

 Update for Microsoft Office 2007 (KB2508958)

7-Zip 4.65

ABBYY FineReader 9.0 Sprint

Adobe Flash Player 10 Plugin

Adobe Reader 9.5.0 - Deutsch

Adobe Shockwave Player 11.5

Apple Application Support

Apple Software Update

AudioConverter Studio 6.1

Avira Free Antivirus

Batman Arkham City version 1.0

Benutzerhandbuch EPSON SX235 Series

Cisco AnyConnect Secure Mobility Client

Cisco AnyConnect Secure Mobility Client 

Company of Heroes

DiRT2

DivX-Setup

Epson Easy Photo Print 2

Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser)

Epson Event Manager

EPSON Scan

EpsonNet Print

F1 2010

Free Audio CD Burner version 1.4

Free YouTube to MP3 Converter version 3.10.815

GIMP 2.6.11

Google Earth

Google Update Helper

ICQ7.5

IrfanView (remove only)

Janitos Offline-Tarifrechner 3.2.5.0

Java Auto Updater

Java(TM) 6 Update 29

JDownloader

L.A. Noire

Mafia II

Malwarebytes Anti-Malware Version 1.60.1.1000

McAfee Security Scan Plus

Microsoft .NET Framework 1.1

Microsoft Games for Windows - LIVE Redistributable

Microsoft Games for Windows Marketplace

Microsoft Office 2007 Service Pack 3 (SP3)

Microsoft Office Access MUI (German) 2007

Microsoft Office Enterprise 2007

Microsoft Office Excel MUI (German) 2007

Microsoft Office File Validation Add-In

Microsoft Office Groove MUI (German) 2007

Microsoft Office InfoPath MUI (German) 2007

Microsoft Office OneNote MUI (German) 2007

Microsoft Office Outlook MUI (German) 2007

Microsoft Office PowerPoint MUI (German) 2007

Microsoft Office Proof (English) 2007

Microsoft Office Proof (French) 2007

Microsoft Office Proof (German) 2007

Microsoft Office Proof (Italian) 2007

Microsoft Office Proofing (German) 2007

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)

Microsoft Office Publisher MUI (German) 2007

Microsoft Office Shared MUI (German) 2007

Microsoft Office Word MUI (German) 2007

Microsoft Silverlight

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

Mozilla Firefox 10.0.1 (x86 de)

MSVC80_x86_v2

MSVC90_x86

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

NBA 2K10

NBA 2K11

NBA 2K12

Nero BurnLite 10

Nero Control Center 10

Nero ControlCenter 10 Help (CHM)

Nero Core Components 10

Nero Update

Netzwerkhandbuch EPSON SX235 Series

Nokia Connectivity Cable Driver

Nokia Ovi Suite

Nokia Ovi Suite Software Updater

Nokia PC Suite

NVIDIA PhysX

OpenAL

OpenOffice.org 3.2

Ovi Desktop Sync Engine

OviMPlatform

PC Connectivity Solution

Picasa 3

QuickTime

Rapture3D 2.3.22 Game

Rockstar Games Social Club

Security Update for Microsoft .NET Framework 4 Client Profile (KB2160841)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition

Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition

Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition

Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edition

Skype Toolbars

Skype™ 4.2

The Lord of the Rings FREE Trial 

Thrustmaster Force Feedback Driver

Uninstall 1.0.0.1

Update für Microsoft Office Excel 2007 Help (KB963678)

Update für Microsoft Office Outlook 2007 Help (KB963677)

Update für Microsoft Office Powerpoint 2007 Help (KB963669)

Update für Microsoft Office Word 2007 Help (KB963665)

Update for 2007 Microsoft Office System (KB967642)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft Office 2007 suites (KB2596651) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2596789) 32-Bit Edition

Update for Microsoft Office 2007 suites (KB2597998) 32-Bit Edition

Update for Microsoft Office Excel 2007 (KB2596596) 32-Bit Edition

VC80CRTRedist - 8.0.50727.4053

Veetle TV 0.9.18

VLC media player 1.1.11

.

==== End Of File ===========================